@ggui-ai/mcp-server-handlers 0.6.2 → 0.7.0

package/dist/renders/blueprint-registry.js

@@ -45,6 +45,7 @@ import { blueprintSourceToFlat, flatToBlueprintSource, summarizeContract, } from
 // can't bundle.
 import { blueprintKey, variantKey } from '@ggui-ai/protocol/blueprint-key';
 import { validateContractRedundancy, } from '@ggui-ai/negotiator';
+import { writeBlueprintDurably, } from './blueprint-durability.js';
 /**
  * Thrown by {@link registerBlueprint} when the structural validator
  * emits one or more `severity: 'error'` findings. Carries the full
@@ -361,6 +362,14 @@ export async function registerBlueprint(deps, scope, input, options = {}) {
         metadata: blueprintToMetadata(blueprint),
     });
     await deps.index.putId(scope, exactKey, id);
+    // Durable write-through for the fresh mint only. The dedup return
+    // above skips it deliberately: that row was written through when it
+    // was first minted, and re-writing it would fail the durable store's
+    // already-exists guard on every cache hit.
+    //
+    // `scope` is the appId at every call site — the registry's tenancy
+    // unit and the durable record's are the same thing.
+    await writeBlueprintDurably(deps.durability, scope, blueprint, input.createdBy ?? 'agent');
     return blueprint;
 }
 /**

package/dist/renders/code-delivery-events.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Named events for the content-addressable code-delivery channel.
+ *
+ * `codeUrl` is the only STATIC delivery surface a COMPILED-COMPONENT
+ * envelope has. Nothing sits behind it: a bootstrap mounts on
+ * `codeUrl`, on a system-card `kind`, or on the live trio (`wsUrl` +
+ * `wsToken`); `kind` is static too, but it belongs to system cards,
+ * which never reach this channel. An envelope carrying none of the
+ * three reads to a host as "not a mountable ggui render". So a failed
+ * `codeUrl` mint is not absorbed by a second static channel; what
+ * happens next is deployment-shaped:
+ *
+ *   - A deployment that mints live-channel credentials still mounts.
+ *     The slice keeps `wsUrl` + `wsToken`, the iframe subscribes, and
+ *     the WS delivers the render body. The cost is the
+ *     zero-round-trip first paint, not the render.
+ *   - A host that resolves the render's `resourceUri` re-mints
+ *     `codeUrl` against the same store at READ time, so a transient
+ *     fault costs it nothing and a persistent one surfaces there as a
+ *     read error rather than a blank card.
+ *   - A deployment with neither loses the mount for that one
+ *     envelope.
+ *
+ * None of the three is distinguishable from the wire — the render
+ * reports success either way — which is why the failure is emitted
+ * under a name instead of swallowed. The event carries whether a live
+ * channel is wired, because that is the difference between "slower
+ * first paint" and "this envelope cannot mount".
+ */
+/**
+ * Every event this module can emit. Closed union — a new emitter picks
+ * from these or extends the type, which is what makes a rename a
+ * compile error rather than an alert filter that quietly stops
+ * matching.
+ */
+export type CodeDeliveryEvent = 'render_code_write_failed';
+/**
+ * The event names as values, so every emitter — in this package or a
+ * storage backend elsewhere — spells them from one place.
+ */
+export declare const CODE_DELIVERY_EVENTS: {
+    /**
+     * The `codeUrl` mint failed for a render envelope. That envelope
+     * carries no static delivery channel; see the module docstring for
+     * what survives.
+     */
+    readonly renderCodeWriteFailed: "render_code_write_failed";
+};
+/**
+ * What an emitter knows at the point the mint failed.
+ */
+export interface RenderCodeWriteFailure {
+    /** Render whose envelope lost its static channel. */
+    readonly sessionId: string;
+    /** Owning app, so the event joins the rest of a deployment's logs. */
+    readonly appId: string;
+    /**
+     * Whether this deployment mints live-channel credentials.
+     *
+     * `true` ⇒ the render still mounts over the WS subscribe; the loss
+     * is the instant first paint. `false` ⇒ this envelope has no mount
+     * mode at all, and only a host that resolves `resourceUri` will
+     * still produce a card.
+     */
+    readonly liveChannelWired: boolean;
+    /** Whatever the store threw. Unshaped by construction. */
+    readonly cause: unknown;
+}
+/**
+ * Emit {@link CODE_DELIVERY_EVENTS.renderCodeWriteFailed}.
+ *
+ * Never throws: a render that already produced valid code and already
+ * committed must not fail because its delivery-channel telemetry did.
+ */
+export declare function reportRenderCodeWriteFailed(failure: RenderCodeWriteFailure): void;
+//# sourceMappingURL=code-delivery-events.d.ts.map

package/dist/renders/code-delivery-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-delivery-events.d.ts","sourceRoot":"","sources":["../../src/renders/code-delivery-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B;;;;OAIG;;CAEiD,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAgBN"}

package/dist/renders/code-delivery-events.js

@@ -0,0 +1,60 @@
+/**
+ * Named events for the content-addressable code-delivery channel.
+ *
+ * `codeUrl` is the only STATIC delivery surface a COMPILED-COMPONENT
+ * envelope has. Nothing sits behind it: a bootstrap mounts on
+ * `codeUrl`, on a system-card `kind`, or on the live trio (`wsUrl` +
+ * `wsToken`); `kind` is static too, but it belongs to system cards,
+ * which never reach this channel. An envelope carrying none of the
+ * three reads to a host as "not a mountable ggui render". So a failed
+ * `codeUrl` mint is not absorbed by a second static channel; what
+ * happens next is deployment-shaped:
+ *
+ *   - A deployment that mints live-channel credentials still mounts.
+ *     The slice keeps `wsUrl` + `wsToken`, the iframe subscribes, and
+ *     the WS delivers the render body. The cost is the
+ *     zero-round-trip first paint, not the render.
+ *   - A host that resolves the render's `resourceUri` re-mints
+ *     `codeUrl` against the same store at READ time, so a transient
+ *     fault costs it nothing and a persistent one surfaces there as a
+ *     read error rather than a blank card.
+ *   - A deployment with neither loses the mount for that one
+ *     envelope.
+ *
+ * None of the three is distinguishable from the wire — the render
+ * reports success either way — which is why the failure is emitted
+ * under a name instead of swallowed. The event carries whether a live
+ * channel is wired, because that is the difference between "slower
+ * first paint" and "this envelope cannot mount".
+ */
+/**
+ * The event names as values, so every emitter — in this package or a
+ * storage backend elsewhere — spells them from one place.
+ */
+export const CODE_DELIVERY_EVENTS = {
+    /**
+     * The `codeUrl` mint failed for a render envelope. That envelope
+     * carries no static delivery channel; see the module docstring for
+     * what survives.
+     */
+    renderCodeWriteFailed: 'render_code_write_failed',
+};
+/**
+ * Emit {@link CODE_DELIVERY_EVENTS.renderCodeWriteFailed}.
+ *
+ * Never throws: a render that already produced valid code and already
+ * committed must not fail because its delivery-channel telemetry did.
+ */
+export function reportRenderCodeWriteFailed(failure) {
+    // eslint-disable-next-line no-console -- structured single-line event for log-pipeline pickup
+    console.warn(JSON.stringify({
+        msg: CODE_DELIVERY_EVENTS.renderCodeWriteFailed,
+        sessionId: failure.sessionId,
+        appId: failure.appId,
+        liveChannelWired: failure.liveChannelWired,
+        error: failure.cause instanceof Error
+            ? failure.cause.message
+            : String(failure.cause),
+        errorName: failure.cause instanceof Error ? failure.cause.name : undefined,
+    }));
+}

package/dist/renders/fetch-gadget-types.d.ts

@@ -14,9 +14,13 @@
  * Behavior:
  *   - Stdlib (`@ggui-ai/gadgets`) is skipped — the sandbox VFS already
  *     carries its types directly.
- *   - Descriptors without a `typesUrl` are skipped (pre-launch the
- *     `registeredGadgetDescriptorSchema` makes `typesUrl` required for
- *     non-stdlib, so this only spares a stdlib / hand-authored ref).
+ *   - Descriptors without a `typesUrl` are skipped — the catalog's
+ *     `strict` posture keeps `typesUrl` optional (nothing in the
+ *     publish→install chain stamps it yet), so generation degrades
+ *     gracefully to no-types codegen for such packages. The
+ *     types-pipeline follow-up (publish stamps `typesUrl` + `typesSri`;
+ *     `registeredGadgetDescriptorSchema` becomes the registration
+ *     posture again) turns this skip back into a rare case.
  *   - Unique `typesUrl`s are fetched in parallel (`Promise.all`).
  *   - Each fetched body is SHA-384-verified against the descriptor's
  *     `typesSri` when present — a CDN-compromise defense symmetric

package/dist/renders/fetch-gadget-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-gadget-types.d.ts","sourceRoot":"","sources":["../../src/renders/fetch-gadget-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,2BAA2B,CAAU;IACrD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;gBAED,QAAQ,EAAE,aAAa,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;CAaL;AAOD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAkEjC"}
+{"version":3,"file":"fetch-gadget-types.d.ts","sourceRoot":"","sources":["../../src/renders/fetch-gadget-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,2BAA2B,CAAU;IACrD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;gBAED,QAAQ,EAAE,aAAa,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;CAaL;AAOD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAkEjC"}

package/dist/renders/fetch-gadget-types.js

@@ -14,9 +14,13 @@
  * Behavior:
  *   - Stdlib (`@ggui-ai/gadgets`) is skipped — the sandbox VFS already
  *     carries its types directly.
- *   - Descriptors without a `typesUrl` are skipped (pre-launch the
- *     `registeredGadgetDescriptorSchema` makes `typesUrl` required for
- *     non-stdlib, so this only spares a stdlib / hand-authored ref).
+ *   - Descriptors without a `typesUrl` are skipped — the catalog's
+ *     `strict` posture keeps `typesUrl` optional (nothing in the
+ *     publish→install chain stamps it yet), so generation degrades
+ *     gracefully to no-types codegen for such packages. The
+ *     types-pipeline follow-up (publish stamps `typesUrl` + `typesSri`;
+ *     `registeredGadgetDescriptorSchema` becomes the registration
+ *     posture again) turns this skip back into a rare case.
  *   - Unique `typesUrl`s are fetched in parallel (`Promise.all`).
  *   - Each fetched body is SHA-384-verified against the descriptor's
  *     `typesSri` when present — a CDN-compromise defense symmetric

package/dist/renders/generation-cache.d.ts

@@ -22,6 +22,7 @@
  *     live cache rows.
  */
 import type { BlueprintIndex, EmbeddingProvider, EnumerableVectorStore, VectorStore } from '@ggui-ai/mcp-server-core';
+import type { BlueprintDurabilityDeps } from './blueprint-durability.js';
 /**
  * Blueprint-cache storage bundle. Threaded into the
  * `BlueprintRegistryDeps` the render handler composes so the matcher +
@@ -35,6 +36,14 @@ export interface GenerationCacheDeps {
      * {@link BlueprintIndex}.
      */
     readonly index: BlueprintIndex;
+    /**
+     * Durable write-through target for fresh registrations (#430 slice
+     * 2). Threaded alongside the cache seams because registration is
+     * where it fires; absent ⇒ the registry stays the only home for a
+     * blueprint, which is this deployment's existing behavior.
+     * See `blueprint-durability.ts`.
+     */
+    readonly durability?: BlueprintDurabilityDeps;
 }
 /** A cache hit the render handler can reconstruct a {@link ComponentGguiSession} from. */
 export interface GenerationCacheHit {

package/dist/renders/generation-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generation-cache.d.ts","sourceRoot":"","sources":["../../src/renders/generation-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAElC;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AAED,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,mBAAmB,EAAE,UAAU,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,mBAAmB,EAAE,UAAU,CAAC;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,mBAAmB,EAAE,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,mBAAmB,EAAE,WAAW,CAAC;IAC/D;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,CAAC;IAC/E;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,mBAAmB,EAAE,sBAAsB,CAAC;CAClF;AAoBD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAsBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,EACrD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAsB1C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE,EAC3C,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,EACrD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CASnC"}
+{"version":3,"file":"generation-cache.d.ts","sourceRoot":"","sources":["../../src/renders/generation-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;CAC/C;AAED,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,mBAAmB,EAAE,UAAU,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,mBAAmB,EAAE,UAAU,CAAC;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,mBAAmB,EAAE,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,mBAAmB,EAAE,WAAW,CAAC;IAC/D;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,CAAC;IAC/E;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,mBAAmB,EAAE,sBAAsB,CAAC;CAClF;AAoBD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAsBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,EACrD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAsB1C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE,EAC3C,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,EACrD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CASnC"}

package/dist/renders/handshake.d.ts

@@ -206,9 +206,11 @@ export interface GguiHandshakeHandlerDeps {
     readonly kvStore: KeyValueStore;
     /**
      * Optional per-app metadata resolver. When bound, the handler reads
-     * `app.gadgets` for the resolved `ctx.appId` and threads it
-     * to the negotiator so synth can teach the LLM which gadget
-     * bindings the produced UI may use.
+     * `app.gadgets` for the resolved `ctx.appId`, resolves the effective
+     * catalog via `resolveAppGadgets` (stdlib floor + declared overlay —
+     * the same resolution the render gate and `ggui_list_gadgets` apply),
+     * and threads it to the negotiator so synth can teach the LLM which
+     * gadget bindings the produced UI may use.
      */
     readonly appMetadataStore?: AppMetadataStore;
     /**

package/dist/renders/handshake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/renders/handshake.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAQL,KAAK,SAAS,EACd,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D;;;;;;GAMG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,KAAK,EAAE;QACZ,gEAAgE;QAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,mEAAmE;QACnE,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;QACpC,uEAAuE;QACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;QAC/C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GAAG,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;IAEnE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QACpB,gFAAgF;QAChF,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;QAC1C,6DAA6D;QAC7D,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAC1C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC;IACzC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7C;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACnE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AAED,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAmBD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED,qEAAqE;AACrE,QAAA,MAAM,WAAW;;IAEf;;;;OAIG;;;;;;;;;;;;CA8BK,CAAC;AAEX,sEAAsE;AACtE,QAAA,MAAM,YAAY;;;;;;;;;;;;;;CAUR,CAAC;AAEX,UAAU,eAAe;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IAC/D;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,mBAAmB,CAAC;IAChC,0CAA0C;IAC1C,YAAY,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACpC,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,GAC7B,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC,CA6LzE;AAkKD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAEnB,WAAW,EAAE,MAAM;IAD/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnB,WAAW,EAAE,MAAM;CAMhD;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,GAAG,SAAS,CAOpB"}
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/renders/handshake.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAQL,KAAK,SAAS,EACd,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D;;;;;;GAMG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,KAAK,EAAE;QACZ,gEAAgE;QAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,mEAAmE;QACnE,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;QACpC,uEAAuE;QACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;QAC/C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GAAG,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;IAEnE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QACpB,gFAAgF;QAChF,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;QAC1C,6DAA6D;QAC7D,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAC1C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC;IACzC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7C;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACnE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AAED,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAmBD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED,qEAAqE;AACrE,QAAA,MAAM,WAAW;;IAEf;;;;OAIG;;;;;;;;;;;;CA8BK,CAAC;AAEX,sEAAsE;AACtE,QAAA,MAAM,YAAY;;;;;;;;;;;;;;CAUR,CAAC;AAEX,UAAU,eAAe;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IAC/D;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,mBAAmB,CAAC;IAChC,0CAA0C;IAC1C,YAAY,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACpC,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,GAC7B,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC,CAoMzE;AAkKD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAEnB,WAAW,EAAE,MAAM;IAD/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnB,WAAW,EAAE,MAAM;CAMhD;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,GAAG,SAAS,CAOpB"}

package/dist/renders/handshake.js

@@ -39,7 +39,7 @@ import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
 import { isGeneratorRegistered } from './assert-generator.js';
 import { blueprintKey } from '@ggui-ai/protocol/blueprint-key';
-import { STDLIB_GADGETS, blueprintSourceToFlat, validateContract, lintContract, summarizeContract, dataContractSchema, handshakeSuggestionSchema, } from '@ggui-ai/protocol';
+import { resolveAppGadgets, blueprintSourceToFlat, validateContract, lintContract, summarizeContract, dataContractSchema, handshakeSuggestionSchema, } from '@ggui-ai/protocol';
 /** Default TTL (seconds). 10 minutes — same as the KV-store docstring. */
 export const HANDSHAKE_RECORD_TTL_SEC = 600;
 /** Default generator slug — matches the `GeneratorRegistry` default. */
@@ -179,10 +179,15 @@ export function createGguiHandshakeHandler(deps) {
             // (ensureConformingContract) and returns a contract that passes the
             // deterministic gate. This is the forgiving-handshake posture: a
             // malformed draft is a TRIGGER into repair, not a thrown error.
-            // Per-app gadget catalog.
+            // Per-app gadget catalog — resolved via `resolveAppGadgets`
+            // (stdlib floor + declared overlay, declared wins per-package),
+            // the SAME resolution the render gate (render.ts) and
+            // `ggui_list_gadgets` apply. The negotiator MUST see the catalog
+            // the render gate will accept; a store that returns raw declared
+            // rows must not drop the floor here. Idempotent over stores that
+            // pre-floor on read (e.g. the cloud DDB adapter).
             const gadgets = deps.appMetadataStore
-                ? ((await deps.appMetadataStore.get(ctx.appId))?.gadgets ??
-                    STDLIB_GADGETS)
+                ? resolveAppGadgets((await deps.appMetadataStore.get(ctx.appId))?.gadgets)
                 : undefined;
             // Delegate suggestion production to the negotiator. Absent
             // negotiator → default `origin: 'agent'` suggestion using the

package/dist/renders/index.d.ts

@@ -47,6 +47,8 @@ export { createGguiDeclareToolCatalogHandler, type GguiDeclareToolCatalogDeps, }
 export { InMemoryToolIdentityCatalogStore, type ToolIdentityCatalogStore, } from "./tool-identity-catalog-store.js";
 export { ChannelNotDeclaredError, InvalidCompleteError, GguiSessionNotFoundError } from "./errors.js";
 export { clearGenerationCache, invalidateGenerationCache, listGenerationCache, type GenerationCacheDeps, type GenerationCacheEntry, type GenerationCacheHit, } from "./generation-cache.js";
+export { BLUEPRINT_DURABILITY_EVENTS, projectDurableBlueprint, writeBlueprintDurably, type BlueprintDurabilityDeps, type BlueprintDurabilityEvent, } from "./blueprint-durability.js";
+export { CODE_DELIVERY_EVENTS, reportRenderCodeWriteFailed, type CodeDeliveryEvent, type RenderCodeWriteFailure, } from "./code-delivery-events.js";
 export { createGguiGetSessionHandler, type GetSessionHeartbeatResult, type GguiGetSessionHandlerDeps, } from "./get-session.js";
 export { handleStream, type HandleStreamDeps, type HandleStreamEnvelope, type GguiSessionStreamTarget, type SendEnvelopeFn, type SendEnvelopeResult, } from "./handle-stream.js";
 export { createGguiListSessionsHandler, type GguiListSessionsHandlerDeps, type GguiSessionSummaryWire, } from "./list-sessions.js";
@@ -70,4 +72,5 @@ export { assembleRenderSliceBase, deriveBundleOrigins, deriveContextSlots, deriv
 export type { SeedPoolSource } from "./seed-pool-source.js";
 export { buildSeedPool, type BuildSeedPoolOptions } from "./build-seed-pool.js";
 export { listRegistryBlueprintsForExport, type ExportableBlueprint } from './export-registry.js';
+export { RENDER_IDENTITY_EVENTS, type RenderIdentityCapacityEvent, type RenderIdentityEvent, type RenderIdentityFailureEvent, type RenderIdentityFailureSource, type RenderIdentitySkipReason, type RenderIdentityUnreadableReason, } from './render-identity.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/renders/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/renders/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,KAAK,0BAA0B,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gCAAgC,EAChC,KAAK,wBAAwB,GAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,KAAK,wCAAwC,EAC7C,KAAK,4BAA4B,EACjC,KAAK,aAAa,IAAI,+BAA+B,EACrD,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,GACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,yBAAyB,EACzB,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,GAClC,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/renders/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,KAAK,0BAA0B,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gCAAgC,EAChC,KAAK,wBAAwB,GAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,KAAK,wCAAwC,EAC7C,KAAK,4BAA4B,EACjC,KAAK,aAAa,IAAI,+BAA+B,EACrD,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,GACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,yBAAyB,EACzB,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,GAClC,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAKjG,OAAO,EACL,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,GACpC,MAAM,sBAAsB,CAAC"}

package/dist/renders/index.js

@@ -47,6 +47,14 @@ export { createGguiDeclareToolCatalogHandler, } from "./declare-tool-catalog.js"
 export { InMemoryToolIdentityCatalogStore, } from "./tool-identity-catalog-store.js";
 export { ChannelNotDeclaredError, InvalidCompleteError, GguiSessionNotFoundError } from "./errors.js";
 export { clearGenerationCache, invalidateGenerationCache, listGenerationCache, } from "./generation-cache.js";
+// #430 slice 2 — durable blueprint write-through. The event registry is
+// exported so storage backends emit the same names from one place.
+export { BLUEPRINT_DURABILITY_EVENTS, projectDurableBlueprint, writeBlueprintDurably, } from "./blueprint-durability.js";
+// Content-addressable code-delivery channel. The event registry is
+// exported so every emitter of a lost `codeUrl` — here or in a
+// transport that mints one on its own read path — spells the name
+// from one place.
+export { CODE_DELIVERY_EVENTS, reportRenderCodeWriteFailed, } from "./code-delivery-events.js";
 export { createGguiGetSessionHandler, } from "./get-session.js";
 export { handleStream, } from "./handle-stream.js";
 export { createGguiListSessionsHandler, } from "./list-sessions.js";
@@ -78,3 +86,8 @@ export { createInMemoryProvisionalPreviewRegistry, evaluateProvisionalPreviewGat
 export { assembleRenderSliceBase, deriveBundleOrigins, deriveContextSlots, deriveContractBundle, derivePropsJson, derivePublicEnvProjection, deriveRenderMeta, resolveGadgetUrls, } from "./slice-meta-derivation.js";
 export { buildSeedPool } from "./build-seed-pool.js";
 export { listRegistryBlueprintsForExport } from './export-registry.js';
+// The render-identity event registry. Exported because storage backends
+// live outside this package and must emit the SAME names — importing
+// them is what keeps the set enumerable from one type and turns a
+// rename into a compile error rather than a silently-dead alert filter.
+export { RENDER_IDENTITY_EVENTS, } from './render-identity.js';

package/dist/renders/render-identity.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Render-identity write-through — the best-effort side write that
+ * accompanies every render commit.
+ *
+ * The record it produces is what lets a
+ * `ui://ggui/render/{sessionId}/{blueprintKey}` locator re-create a
+ * render after the render row itself is gone (the locator's segment is
+ * named for its domain; the record's field is `contractKey`). Writing it is optional
+ * everywhere: with no {@link RenderIdentityStore} bound, every helper
+ * here is a no-op and the render path is byte-for-byte what it was.
+ *
+ * Failure posture — a write here can NEVER fail a render. The row is
+ * already committed and is the source of truth; the identity record is
+ * a durability optimization on top of it. Every failure is caught and
+ * surfaced as a named structured log event, never rethrown.
+ *
+ * Shared by `ggui_render` (write-through at each commit site) and the
+ * mutation tools that later refresh the same record.
+ */
+import type { RenderIdentityStore, StoredGguiSession } from '@ggui-ai/mcp-server-core';
+/**
+ * The identity slice a caller must supply — the three fields that
+ * cannot be read off the committed row. Everything else on the record
+ * (tenancy, props, sequence, timestamps) comes from the row itself, so
+ * the record can never disagree with what was actually persisted.
+ */
+export interface RenderIdentityFields {
+    /**
+     * Registered blueprint id, or `null` when registration did not
+     * resolve one for this commit (no cache bound, registration failed
+     * or was fail-closed rejected, or a probe/placeholder/error commit).
+     * #460: cold generation resolves the id BEFORE its success commit,
+     * so records are written complete once — `null` is a terminal state
+     * (#445: structurally non-remintable), never a pending one.
+     */
+    readonly blueprintId: string | null;
+    /**
+     * MUST be `blueprintKey(contract)` — the 16-char key the blueprint
+     * registry addresses a contract by. NEVER the validators-bundle
+     * contract hash: they are different lengths and different domains,
+     * and a record carrying the wrong one points a locator at nothing.
+     */
+    readonly contractKey: string;
+    /** MUST be `variantKey(variance)` for the same render. */
+    readonly variantKey: string;
+}
+/**
+ * Named structured events this module emits, as a closed set.
+ *
+ * Each is emitted as one JSON line so log pipelines can filter on
+ * `msg` without parsing prose (same shape as this package's other
+ * best-effort write events). Operators alert on these names, so they
+ * are a union rather than a bare `string`: a typo would produce a
+ * plausible-looking event that no alert ever matches, and nothing
+ * downstream could tell it from the write simply never failing.
+ *
+ *   - `render_identity_write_failed` — a first write could not be
+ *     persisted.
+ *   - `render_identity_refresh_failed` — a mutation path could not
+ *     refresh an existing record.
+ */
+export type RenderIdentityFailureEvent = 'render_identity_write_failed' | 'render_identity_refresh_failed';
+/**
+ * The registry: every named event emitted about a render-identity
+ * record, by ANY writer — including storage backends outside this
+ * package, which import these rather than restating the literals.
+ * Enumerable from this one type is the property that makes it a
+ * registry; a backend that spells its own string loses it.
+ *
+ * Two members sit outside {@link RenderIdentityFailureEvent} on
+ * purpose, because neither carries a caught error:
+ *
+ *   - `render_identity_refresh_skipped` — nothing went wrong; there
+ *     was simply nothing to refresh. Carries a
+ *     {@link RenderIdentitySkipReason}.
+ *   - `render_identity_row_unreadable` — a stored record exists but
+ *     cannot be read back as a valid one. Not a failed operation and
+ *     not a miss: a data-integrity signal, carrying a
+ *     {@link RenderIdentityUnreadableReason}.
+ *
+ * Folding either into the failure union would let a caller pass it
+ * where an error is expected, and would tell an operator reading the
+ * type that both are things to page on.
+ */
+export type RenderIdentityEvent = RenderIdentityFailureEvent | 'render_identity_refresh_skipped' | 'render_identity_row_unreadable' | RenderIdentityCapacityEvent;
+/**
+ * A record written successfully but at a size worth watching. Neither a
+ * failure nor a skip — the write HAPPENED — so it sits in its own
+ * category: a sizing signal for the offload threshold, not something to
+ * page on.
+ */
+export type RenderIdentityCapacityEvent = 'render_props_over_cap';
+/**
+ * Why a refresh wrote nothing. Closed for the same reason the event
+ * names are: it is a filterable field on a structured event.
+ *
+ * `no-record-or-not-advanced` is the honest reason for a backend whose
+ * refresh is a single conditional write: the condition covers both
+ * "no record" and "sequence already at/past this value", and the store
+ * does not report which one rejected it.
+ */
+export type RenderIdentitySkipReason = 'no-record' | 'no-record-or-not-advanced';
+/**
+ * Why a stored row could not be projected back into a record. Distinct
+ * from {@link RenderIdentitySkipReason}: a skip means there was
+ * nothing to act on, this means there WAS something and it was
+ * malformed.
+ */
+export type RenderIdentityUnreadableReason = 'unparseable-timestamp';
+/**
+ * WHICH store a failure came from, on paths that touch two of them.
+ *
+ * A refresh reads the render's own sequence and then writes the
+ * identity record; both can fail, and the same event name covers both.
+ * Without this, a responder reading `render_identity_refresh_failed`
+ * cannot tell whether the render store or the identity store
+ * misbehaved, and starts in the wrong place. Closed, because it is a
+ * filterable field like the names themselves.
+ */
+export type RenderIdentityFailureSource = 'render-row-seq-read' | 'identity-record-write';
+/**
+ * The event names as values, so every emitter — in this package or a
+ * storage backend elsewhere — spells them from one place. Importing
+ * these is what turns a future rename into a compile error instead of
+ * an alert filter that silently stops matching.
+ */
+export declare const RENDER_IDENTITY_EVENTS: {
+    readonly writeFailed: "render_identity_write_failed";
+    readonly refreshFailed: "render_identity_refresh_failed";
+    readonly refreshSkipped: "render_identity_refresh_skipped";
+    readonly rowUnreadable: "render_identity_row_unreadable";
+    readonly propsOverCap: "render_props_over_cap";
+};
+/**
+ * Write the identity record for a just-committed render. Best-effort:
+ * an absent store is a no-op, and a rejecting store logs
+ * `render_identity_write_failed` and returns normally.
+ *
+ * The caller awaits this, so it adds exactly one store round-trip to
+ * the render — never a retry loop, never a background task that
+ * outlives the response.
+ *
+ * `failureEvent` overrides the logged event name for callers whose
+ * failure is a distinct operational signal (a refresh on a mutation
+ * path is not a first write, and operators alert on them separately).
+ */
+export declare function writeRenderIdentity(store: RenderIdentityStore | undefined, session: StoredGguiSession, identity: RenderIdentityFields, failureEvent?: RenderIdentityFailureEvent): Promise<void>;
+/**
+ * Refresh an EXISTING record after a tool re-committed the render row
+ * — `ggui_update` mutating props, `ggui_runtime_sync_context`
+ * mirroring a context snapshot.
+ *
+ * Refreshes only what the row can answer for: props, the sequence at
+ * this commit, and `updatedAt`. The identity slice
+ * (`blueprintId` / `contractKey` / `variantKey`) is carried forward
+ * from the existing record VERBATIM, never recomputed. That is not
+ * caution — it is the only correct behaviour available here:
+ * `contractKey` is `blueprintKey(agreed contract)`, and the agreed
+ * contract lived in the handshake these tools never see. A render row
+ * carries its projected specs, not the contract that keyed it, so any
+ * key recomputed here would address a different blueprint (or none).
+ *
+ * For the same reason a MISSING record is skipped rather than
+ * created: a record needs an identity, and inventing one would write a
+ * locator that points at nothing — strictly worse than no record,
+ * because a re-mint would trust it. The skip is announced as
+ * `render_identity_refresh_skipped` so an operator who wired a store
+ * mid-flight can see which renders predate it.
+ *
+ * Best-effort throughout, like every write in this module: the tool
+ * call succeeds regardless. A consequence worth knowing: because the
+ * write rebuilds the WHOLE record from the current row rather than
+ * patching fields, any refresh self-heals drift left by an earlier one
+ * that failed — a later context sync repairs props and sequence a
+ * dropped update-refresh had gone stale on.
+ */
+export declare function refreshRenderIdentity(store: RenderIdentityStore | undefined, session: StoredGguiSession): Promise<void>;
+//# sourceMappingURL=render-identity.d.ts.map

package/dist/renders/render-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-identity.d.ts","sourceRoot":"","sources":["../../src/renders/render-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAEV,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAElC;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,0BAA0B,GAClC,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,mBAAmB,GAC3B,0BAA0B,GAC1B,iCAAiC,GACjC,gCAAgC,GAChC,2BAA2B,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,2BAA2B,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,MAAM,2BAA2B,GACnC,qBAAqB,GACrB,uBAAuB,CAAC;AAE5B;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;;CAMqB,CAAC;AA4CzD;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,oBAAoB,EAC9B,YAAY,GAAE,0BAA+C,GAC5D,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA4Bf"}